$ rpki-client -vvf repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa File: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (raw, json) Hash identifier: wI2gL+xeUj5R4U7m3JbkXYMiUcHbqqc4tcsVpsPURE0= Subject key identifier: 0A:E2:20:6B:B9:32:8D:C8:D2:BE:3D:98:A3:9F:F7:03:1F:05:80:79 Certificate issuer: /CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Certificate serial: 45D511D817DBFDE456248C3714FE6784E93FC929 Authority key identifier: 78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa Signing time: Thu 18 Sep 2025 09:02:57 +0000 ROA not before: Thu 18 Sep 2025 08:57:57 +0000 ROA not after: Thu 17 Sep 2026 09:02:57 +0000 asID: 152759 IP address blocks: 157.66.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d5:11:d8:17:db:fd:e4:56:24:8c:37:14:fe:67:84:e9:3f:c9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Validity Not Before: Sep 18 08:57:57 2025 GMT Not After : Sep 17 09:02:57 2026 GMT Subject: CN=0AE2206BB9328DC8D2BE3D98A39FF7031F058079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:fc:21:ef:e4:58:91:31:6e:2b:1a:3d:81: 4b:03:c1:ac:88:4e:c2:28:14:40:4c:19:83:29:75: d4:e7:ba:34:a0:32:c8:a2:5b:17:93:97:b7:4e:b3: b8:1f:87:4d:14:5d:a1:22:b9:63:cc:1c:08:c9:98: 36:34:e1:ba:46:1b:ab:92:a6:4f:3c:92:cd:c8:0d: 65:a3:a7:1c:dd:ef:f4:09:77:49:0c:0e:84:1b:50: 20:55:00:2c:09:c0:79:28:e7:4e:96:a5:76:c0:8a: ff:16:68:ef:b0:bc:d9:86:4a:cb:45:ed:62:70:40: 78:d8:45:fa:f0:a8:0c:ce:f9:35:1c:80:4c:fa:25: c9:6b:d6:b0:9c:c4:bd:18:c9:33:8b:a4:9d:2e:83: a5:b9:f9:d3:9a:52:3b:bc:17:33:3a:64:0c:c8:87: 69:be:ac:b1:e3:67:c3:f5:24:d8:09:64:f2:01:37: 37:30:ae:19:72:98:fd:7c:b2:ec:04:6c:33:80:f4: 33:14:76:83:71:ce:bf:1a:e7:6b:ba:c9:84:43:23: b8:a6:a7:b8:54:0e:d8:46:79:e5:60:4b:2d:cc:b2: 39:89:c7:02:68:37:e6:1f:bd:d6:7c:33:86:4b:97: 32:e6:fc:8e:9b:bd:b0:ef:db:84:a0:94:06:05:9d: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E2:20:6B:B9:32:8D:C8:D2:BE:3D:98:A3:9F:F7:03:1F:05:80:79 X509v3 Authority Key Identifier: keyid:78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.140.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:3c:a6:3c:3d:88:50:d8:08:ff:01:5c:61:ed:f8:fd:16:ef: 78:34:e5:01:5c:82:39:29:3e:bb:62:b1:e6:dd:74:30:61:d6: a9:f4:3f:3a:97:01:8d:db:ca:ca:1f:ed:70:a9:1a:31:bd:c7: 09:7c:f8:38:69:38:91:cd:f6:e6:37:a2:85:c1:8b:8f:e5:52: d4:c3:01:dd:ec:d5:4e:0e:8d:af:11:93:d2:7e:90:f2:a6:ed: b4:d7:35:fd:0e:c0:5a:bd:7c:88:9b:a1:75:69:3e:23:bc:6d: 3b:cc:a2:21:37:c1:4d:c2:ce:69:e7:41:db:90:ab:bd:df:6e: d8:3a:87:1b:06:7d:9c:50:92:49:12:bf:cd:12:cc:ce:d0:67: 2c:77:cb:ae:cf:06:b2:b1:a8:5b:89:aa:21:ab:3f:7d:d5:dc: 4d:94:19:e8:8f:ec:88:65:da:04:ab:7c:f4:59:12:76:aa:b3: 06:69:80:0f:d3:09:19:f7:92:6e:44:6e:9d:76:fb:d5:e3:0d: 72:25:8a:69:72:ea:fa:55:a3:4d:06:df:58:ee:a2:3f:5e:10: 37:07:28:36:09:84:0e:45:a8:5e:bc:20:f6:d4:c2:59:e2:d5: 94:30:0f:27:b8:ea:c5:9d:1b:89:2d:fc:ec:0e:48:41:55:a6: 64:47:de:3e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURdUR2Bfb/eRWJIw3FP5nhOk/ySkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURB M0MwNkMxNjAeFw0yNTA5MTgwODU3NTdaFw0yNjA5MTcwOTAyNTdaMDMxMTAvBgNV BAMTKDBBRTIyMDZCQjkzMjhEQzhEMkJFM0Q5OEEzOUZGNzAzMUYwNTgwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSSPwh7+RYkTFuKxo9gUsDwayI TsIoFEBMGYMpddTnujSgMsiiWxeTl7dOs7gfh00UXaEiuWPMHAjJmDY04bpGG6uS pk88ks3IDWWjpxzd7/QJd0kMDoQbUCBVACwJwHko506WpXbAiv8WaO+wvNmGSstF 7WJwQHjYRfrwqAzO+TUcgEz6Jclr1rCcxL0YyTOLpJ0ug6W5+dOaUju8FzM6ZAzI h2m+rLHjZ8P1JNgJZPIBNzcwrhlymP18suwEbDOA9DMUdoNxzr8a52u6yYRDI7im p7hUDthGeeVgSy3MsjmJxwJoN+YfvdZ8M4ZLlzLm/I6bvbDv24SglAYFnbLHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUCuIga7kyjcjSvj2Yo5/3Ax8FgHkwHwYDVR0j BBgwFoAUeHAqdoyh4YZ9VDATu2GG7aPAbBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmE5ZjRlMi1jNzNiLTQ0MjctOTgyOS0xZGExYmFhYjg3MGIvMC83ODcwMkE3NjhD QTFFMTg2N0Q1NDMwMTNCQjYxODZFREEzQzA2QzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURBM0Mw NkMxNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiYTlmNGUyLWM3M2ItNDQyNy05 ODI5LTFkYTFiYWFiODcwYi8wLzMxMzUzNzJlMzYzNjJlMzEzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnUKMMA0GCSqG SIb3DQEBCwUAA4IBAQBbPKY8PYhQ2Aj/AVxh7fj9Fu94NOUBXII5KT67YrHm3XQw Ydap9D86lwGN28rKH+1wqRoxvccJfPg4aTiRzfbmN6KFwYuP5VLUwwHd7NVODo2v EZPSfpDypu201zX9DsBavXyIm6F1aT4jvG07zKIhN8FNws5p50HbkKu9327YOocb Bn2cUJJJEr/NEszO0Gcsd8uuzwaysahbiaohqz991dxNlBnoj+yIZdoEq3z0WRJ2 qrMGaYAP0wkZ95JuRG6ddvvV4w1yJYppcur6VaNNBt9Y7qI/XhA3Byg2CYQORahe vCD21MJZ4tWUMA8nuOrFnRuJLfzsDkhBVaZkR94+ -----END CERTIFICATE-----Generated at Wed Nov 5 06:59:29 2025 by rpki-client